General
- Target 2026-10-26_86fc1efe115ebc79270f665599903350_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 3.7MB
- Sample261027-p1cknade89
- SHA256 ac1aed7a49241601dd82a73436dc8a21cd8e598cb249a7914b8713489023ec47
- MD5 86fc1efe115ebc79270f665599903350
- SHA1 e3d6d98871fc168df2360b8fe472b3a1ae5179d3
- SHA512 d85a82530579fb74cb30d62fc2b2158ddbe8ddf411082a9b6991f7d0239ecbde105462d5c8ca6ee1394f0e79514c06715e219733a49c18eaa32e79b4c7f05f33
- SSDEEP 49152:67JynhJ8EhdVMw7Y9odwfDFqfFFJVgrvqzbut1wOq/ejgXUeT+uXEkjNEEBHLuda:tsoEC9ia+uUkjDBHLuDw7mLQuw
- TLSH T1F906BE0AA3E406ACE0F7D679CED6C553D776B80D07B1A68F029098A64F772609F39713
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-26_86fc1efe115ebc79270f665599903350_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260911-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_86fc1efe115ebc79270f665599903350_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 3.7MB
- SHA256 ac1aed7a49241601dd82a73436dc8a21cd8e598cb249a7914b8713489023ec47
- MD5 86fc1efe115ebc79270f665599903350
- SHA1 e3d6d98871fc168df2360b8fe472b3a1ae5179d3
- SHA512 d85a82530579fb74cb30d62fc2b2158ddbe8ddf411082a9b6991f7d0239ecbde105462d5c8ca6ee1394f0e79514c06715e219733a49c18eaa32e79b4c7f05f33
- SSDEEP 49152:67JynhJ8EhdVMw7Y9odwfDFqfFFJVgrvqzbut1wOq/ejgXUeT+uXEkjNEEBHLuda:tsoEC9ia+uUkjDBHLuDw7mLQuw
- TLSH T1F906BE0AA3E406ACE0F7D679CED6C553D776B80D07B1A68F029098A64F772609F39713
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Modifies system executable filetype association
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1